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METHOD AND SYSTEM FOR DEVICE MANAGEMENT 



TECHNICAL FIELD 

5 

The invention is concerned with a method and system for managing objects in 
devices in a device management system in a mobile network infrastructure. The 
system comprises a first server with a device management application using a first 
protocol and a second server with a device management application using a 
10 second protocol. 

BACKGROUND 

GSM, together with other technologies, is part of an evolution of wireless mobile 
15 telecommunication. The Global System for Mobile Communication (GSM) is a 
standard for digital wireless communications with different services, such as voice 
telephony. The Subscriber Identity Module (SIM) inside GSM phones was 
originally designed as a secure way to connect individual subscribers to the 
network but is nowadays becoming a standardized and secure application 
20 platform for GSM and next generation networks. 

The Mobile Station (MS) represents the only equipment the GSM user ever sees 
from the whole system. It actually consists of two distinct entities. The actual 
hardware is the Mobile Equipment (ME), which consists of the physical 
equipment, such as the radio transceiver, display and digital signal processors. 

25 The subscriber information is stored in the Subscriber Identity Module (SIM), 
implemented as a Smart Card. WUh respect to the terminology used in this 
document, The Mobile Station (MS) includes the Mobile Equipment (ME) and the 
Subscriber Identity Module (SIM). The term "Handset" is used as a synonym to 
the Mobile Equipment (ME) and the term "Device" as a synonym to The Mobile 

30 Station (MS). 
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The mobile equipment is uniquely identified by the Intemational Mobile Equipment 
Identity (IMEI) being a unique code that oonresponds to a specific GSM handset. 
The SIM card contains the Intemational Mobile Subscriber Identity (IMSI). 
identifying the subscriber, a secret key for authentication, and other user 
5 infomnation. 

The term "device identity information" comprises in the context of this document 
both equipment infonnation. such as the IMEI. and subscriber information, such 
as the MSISDN or IMSI. The IMEI and the IMSI or MSISDN are. however, 
independent and can thereby provide personal mobilrty. 

10 The Mobile Station Integrated Service Digital Networtc Number. MSISDN. is the 
standard intemational telephone number used to identify a given subscriber. The 
operator declares the subscription in a database inside the networi<. which holds 
the correspondence between the IMSI and the MSISDN. By Inserting the SIM card 
into another GSM terminal, the user is able to receive and make calls from that 

15 terminal, and receive other subscribed services. 

A device management session includes e.g. authentication (user verification), 
device inventory (a device management application read which parameters and 
applications are installed in the telephone for future decisions, such as e.g. 
updating, adding and deleting things from the installations), continuous 
20 provisioning (a device management application e.g. updates parameters on the 
telephone device, sends applications to the device, performs software and 
firmware updates), device diagnostics (enror finding), etc. 

Sending new settings over the air is one simple way to provision a device with 
configuration parameters, such as connectivity infomiation (device settings). After 
25 receiving the settings to configure the phone, the customer simply saves them to 
ttie phone and is then able to use the services. For the operator, simplifying 
access to advanced services can bring higher usage rates, new revenue streams, 
and reduced customer helpline costs. 
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As a result of technological development, networked and mobile/wireless devices 
are becoming more and more complex, and consequently, connected devices are 
also becoming more and more difficult to manage. Device management 
standardization is an on-going issue. The SyncML initiative has identified the 
5 complexity of this issue, and the importance for finding a universal solution for a 
device management protocol. SyncML is the open standard that drives data 
mobility by establishing a common language for communications between 
devices, applications and networks. 

Device management allows third parties to configure mobile devices on behalf of 
10 the end users. There are numerous cases, wherein device management is 
needed such as new device purchase, remote seivice management, software 
download, changing and adding services, and service discovery and provisioning 
etc. Device management applications are typically used by mobile service 
providers. They are used for customer care purposes and to increase revenue by 
15 effective value added service management. 

SyncML Device Management (SyncML DM) is a device management protocol for 
management of devices and applications, simplifying configuration, updates and 
support.. 

SyncML Device Management Protocol (SyncML DM) is thus a standard for 
20 communication between devices and device management sender systems. The 
standardization body is OMA, Open Mobile Alliance. The device to be managed Is 
equipped with a SyncML DM user agent in the device (i.e. terminal or handset) 
that speaks the SyncML DM language. 

25 However, as was stated above, a mobile station often consists of two entities: the 
subscriber identity module (SIM) and the mobile equipment (ME). In a device 
management environment both entities that makes up the "device" are of interest. 
Both those entities need to be subjects of device management operations. 
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Device management operations towards the SIM card are to a certain extent 
proprietary. Over-the-air secure transport is specified for example by GSM SMS 
point-to-point and "03.48" (Security mechanisms for the SIM application toolkit). 
However the formatting of the device management commands and the access 

5 conditions to the SIM files are card type (vendor) proprietary. However, many 
existing SIM cards use proprietary protocols for secure transport. Thus, protocols 
may be both vendor proprietary and/or standardised depending on the individual 
handset and SIM card models. That in turn implies the need for several device 
management protocols in the device management environment in order to 

10 manage the device as a whole. The need for a multi-protocol device management 
environment stems therefore from the fact that the mobile devices of concern 
comprise data entities residing both on the SIM card and in the handset itself. 

Data entities residing in the handset (I.e. Mobile Equipment (ME)) are represented 
15 by standardized Managed Objects (MO) as specified by the SyncML DM protocol. 
The protocol specifies how the MOs may be managed (i.e. read, updated, 
deleted...) by a remote server side component. For more information reference is 
made to the standard "SyncML Device Management Standardized objects" 
version 1.1.2. 

20 

Data entities residing in the SIM card, in turn, are represented by a logical 
structure of files. This structure is hierarchical and there are three types of files, 
i.e. Elementary Files (EF), Dedicated Files (DF) and Master Files (MF), the last 
mentioned ones being highest in the hierarchy. More details about SIM files can 
25 be found in the GSM standard ETSI TS 1 00 977 V8.2.0. 

The SIM files can be remotely managed by standardized commands for Remote 
File Management (RFM), The access conditions for the files are, however, not 
standardized as these are under the control of the application manager in co- 
30 operation with the network operator or service provider owing the SIM. The 
access conditions may be dependent on the level of security applied to the SIM 
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Data Download message. The parameters) in the SIM Data Download message 
is either a single command or a list of commands to be processed sequentially. 
Detailed information can be found in the GSM standard ETSI TS 101 181 V8.3.0. 

5 The SIM card data and services are not manageable as objects that can be 
managed by the SyncML DM protocol. It is possible to specify them as SyncML 
DM managed objects (MOs), but the SyncML DM protocol does not specify how a 
SyncML DM user agent in the handset could manage the SIM. 



10 OBJECT OF THE INVENTION 

The object of the invention is to develop improved methods and systems that 
enable management of the whole device, which comprises data entities residing 
both on the handset and the SIM. 



15 SUMMARY OF THE INVENTION 

In the method of the invention device management is performed by managing 
objects in devices in a device management system in a mobile network 
infrastructure. The system comprises a first server with a first device management 

20 application using a first protocol, a second server with a second device 
management application using a second protocol, an interface between them and 
a device with objects to be managed. In the method, the first management 
application initiates a device management session with the interface in order to 
manage the objects in said device. The interface translates the objects to be 

25 managed into a form understood by the second management application and 
invokes management operations to be made by the second management 
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application. The first management application then perfomns the management 
operations to said device. 

The system of the invention manages objects in devices in a device management 
system in a mobile networic infrastructure. The system of the invention comprises 
a first sen/er with a device management application using a first protocol, a 
second server with a device management application using a second protocol, an 
interface between them implementing protocol conversion, a database storing 
mapping relationships between first protocol objects to be managed and second 
protocol objects to be managed, and a device with second protocol objects to be 
managed. 

The preferable embodiments of the method of the invention are presented in the 
subclaims. 

The invention that enables remote management of mobile devices that requires a 
multi-protocol device management environment. 

In this document, the temi SIM file management (SFM) is used for device 
management operations towards SIM cards. That includes both the Over-The-Air 
(OTA) transport and the formatting. 

In this document, a system that, is able to manage both the handset and the SIM 
card is referred to as a Unified Device Management system (UDM). In the scope 
of UDM, both the SIM residing and the terminal residing data, applications and 
software are of interest and must be managed. 

By the invention, a UDM application may manage both handset and SIM by the 
SyncML DM protocol. 
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Said interface in the invention especially covers adaptive processes where SIM 
residing data and applications are presented as, and managed in the same way 
as OMA-DM managed objects (MOs) (OMA-DM protocol and SyncML-DM 
protocol mentioned earlier refers to the same protocol). This is achieved by an 
innovative mapping of data objects and device management operations from 
different technologies and protocols onto one desired protocol, like e.g. OMA-DM 
protocol. 

The invented adaptive processes covred by the interface and embodied are 
referred to as the Adaptive Protocol Conversion (ARC) system in this document 
foHA/ard. The APC system in the invention makes sure that a device management 
application, on user level, can implement a device management application, using 
only the desired protocol, such as the OMA-DM (SyncML DM) protocol. 

Seen from the point of view of a device management application, the mobile 
device that comprises two entities that requires different device management 
protocols, can be managed as one uniform logical entity by, In practice, only one 
device management protocol. 

By the Invented method and system, a unified single-protocol device management 
application development environment is exposed. That way the application level 
development of device management use-cases can be done simply by one and 
the same device management protocol. Whatever conversions and data mapping 
required to manage the SIM card is handled "under the surface" by the invented 
method and system. The prefered embodiment of the method and system of the 
invention is where the unified application development environment takes place 
over a standardised device management protocol such as OMA-DM (SyncML- 
DM). 

In the invention, gateway features facilitate adaptive protocol conversion, including 
data entity mapping according to strictly applied dedicated device descriptions and 
proxy features facilitating device management sessions between device 



wo 2006/022578 



8 



PCT/SE2005/001157 



management components (I.e. clients and sen/ers) that are not using one and the 
same device management protocol. 

The system comprises a dedicated gateway/proxy application program and 
5 database. 

To summarize, by the invention, a device management application may manage 
data entities residing both In the handset and on the SIM by the OMA-DM 
protocol. 

10 

In the following, the invention is described by means of some advantageous 
embodiments and figures, the details of which the invention is not restricted to. 

15 FIGURES 

Figure 1 is a view of a prior art target environment without the invention 

Figure 2 is a view of an environment that includes the entities that implements the 
method of the invention 

Figure 3 Is a signal diagram of the method of the invention 

20 Figure 4 displays a schennatic view of the conversion map between SIM files and 
managed objects 

DETAILED DESCRIPTION 

Figure 1 is a view of a prior art target environment without the invention. The 
25 target environment Is presented as an example of a telecommunication network 1 
in which the Invention can be used. The telecommunication network 1 comprises 
one or more devices to be managed, of which one device 2 and a device 
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management server 3 can be seen in figure 1. The device 2 to be managed is in 
this example a mobile device 2 belonging to the mobile network infrastmcture 4. 

The Mobile Station (MS) (= The device) represents the only equipment the GSM 
user ever sees from the whole system. It actually consists of two distinct entities. 
5 The actual hardware is the Mobile Equipment (ME) (=handset) marked with 
reference number 5 in figure 1. which consists of the physical equipment, such as 
the radio transceiver, display and digital signal processors. The subscription 
information is stored in the Subscriber Identity Module (SIM), marked with 
reference number 6 in figure 1, implemented as a Smart Card. 

10 In this context, the mobile network Infrastructure includes all components and 
functions needed for mobile data communication, both GSM and internet included. 
The mobile device 2, in turn, Includes both the handset 5 and the SIM card 6. 
Thus, the mobile device 2 has access to the mobile network Infrastmcture 4. 

15 SyncML Device Management Protocol (SyncML DM) is one standard for 
communication between devices and applications in device management 
systems. If this standard is used, the device to be managed, i.e. the mobile station 
2 in figure 1 . is equipped with a SyncML user agent 7 in the device 2 that speaks 
the SyncML DM language. With other device management protocols, the user 

20 agent 7 is a user client for the particular device management application used in 
the device management system 9. The data entities residing in the handset 5 (i.e. 
Mobile Equipment (ME)) are represented by standardized Managed Objects (MO) 
15. When the protocol used is SyncML DM. these are specified by the SyncML 
DM protocol. 



25 



The data entities residing in the SIM card, in turn, are represented by a logical 
structure of files, including the Elementary Files (EF) having reference number 8 
in figure 1 . 
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The SIM files 8 can be remotely managed by standardized commands for remote 
file management by means of a standardized remote file management application 
16, such as RFM, in the device management system 9. The device management 
system 9 of figure 1 also has a device management application 10 for managing 

5 the managed objects (MO) 15 using a device management protocol, which e.g. 
can be SyncML DM, which is typically used by mobile service providers. The 
applications 10, 16 are in reality on different servers and thus the server 3 has to 
be considered as a common expression for applications on server side. The 
applications are used for customer care purposes and to increase revenue by 

10 effective value added service management. 

Thus, in summary, the mobile device 2 of figure 1 comprising the handset 5 and 
the SIM card 6 is subject of device management in a multi-protocol mobile device 
management environment. The data entities 15, i.e. the managed objects, in the 

15 handset are then manipulated by management operations carried over a 
standardized protocol, i.e. the SyncML-DM protocol in this example. The user 
agent 7 is the client side component required to carry out device management 
operations over the SyncML-DM protocol. The data entities 8, i.e. the elementary 
files, in the SIM card may in turn be manipulated by management operations 

20 carried over Remote File Management (RFM) protocols. The data entities, MO's 
and EF's, may not be managed over the same device management protocol. 

However, via the adaptive protocol conversion provided by the invention, by 
means of the APC system mentioned, the EF's are presented as manageable 

25 over the same protocol as the MO's. Figure 2 is a view of an environment that 
includes the entities that implements the method of the invention in addition to 
those presented in figure 1. The system 1' in figure 2 comprises components 
residing on both the mobile device 2 in figure 2 and on the sen/er side 3 in figure 
2. Again the server side in the reality consists of several servers, one for each 

30 device management application and one for the APC system interface. The server 
including the APC system interface 14 is an own server between the different 
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device management applications 10,16 and the APC is In fact a tightly Integrated 
client to SIM file management applications. 

The APC interface comprises an APC application 11 and an APC datal>ase12. 

5 The APC application 11 interprets the OMA-DM device management protocol and 
acts as the client side component on behalf of the mobile device during the 
management session. The APC application 11 communicates with the APC 
database 12 which is a conversion map and holding the relationship between 
managed objects 13 and elementary files 8. The APC database is presented more 

10 in detail In figure 4. 

An example of an embodiment of the method of the Invention is presented in form 
of a signal diagram in figure 3. 

Figure 3 shows on the lowest row, the physical entities taking part in the method 
of the invention. These are the handset, the SIM card, a server holding a remote 

15 file management application, a sen/er holding the OMA-DM application and a 
server holding the APC Interface with the APC application and the APC 
conversion map (APC database). All said servers are called wfth the common 
reference number 3 In figure 2. The APC system of the invention comprises the 
APC application (a server application in the APC interface) and the APC database 

20 (a server database). Further applications on the server-side are the RFM and 
OMA-DM applications. 

Figure 3 also displays the flow of events for an embodiment of the method of the 
invention in the form of device management transactions, wherein the OMA-DM 
application Is perfomiing management transactions towards the SIM card and the 
25 APC system Is Involved to fasdiitate the session. 

The Intention is now to read or update the value/contents of the elementary file 
EFbytecode of a particular device by means of the OMA-DM application. 
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When the irrtention is to manage a specific S\M file, the OMA-DM application 
knows which MO it corresponds to as this appears in the Device Description, 
which is a part of the OMA-DM application. The conversion from the EFbytecode 
to the corresponding managed Object (MO) is perfomied in step 1 of figure 3 by 
the OMA-DM application. 

In the second step, signal 2 of figure 3. the OMA-DM application issues a device 
management operation via the APC application in form of a request to the APC 
application to read or update said MO, which was converted to in step 1 . 

The APC application then maps the data entity (that is the MO) represented by a 
URI, onto the correct EF file name by requesting in step 3 the relationship MO~EF 
in the APC data entity conversion map and getting the infomiation in step 4. URI 
is short for Unifomi Resource Identifier, the generic tenn for all types of names 
and addresses that refer to objects on the World Wide Web. A URL is one kind of 
URI. Reference is made to RFC 2396 Request for Comments document for the 
Uniform Resource Identifiers (URI). 

When the APC application knows what EF to address, it invokes a Remote File 
Management (RFM) transaction directly with the SIM card over-the-air. The RFM 
transaction is carried out via an RFM application (in step 5) that is able to format, 
encode and transmit Over-the-air device management transactions with the SIM 
card, which is performed in step 6. 

Response from the SIM card is received in step 7 via the RFM application to the 
APC application (in step 8). Now the APC application converts back to the 
SyncML DM protocol, fonwarding the response from the SIM card) and continues 
the session with the OMA-DM application (reference number 9). The experience 
from the OMA-DM application's view is that it stands in direct contact With the 
device (i.e. the SIM card) and manages it directly as were it manageable over 
OMA-DM device management protocol. 
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The APC system provides the adaptive protocol conversion features by exposing 
a device description of the SIM EF's accordin to the OMA-DM device description 
framework, and implementing the same in the ADC conversion map. 

Figure 4 displays a schematic view of the conversion map (reference number 17). 
The APC conversion map provides a lookup where SIM files (reference number 
19) are mapped onto OMA-DM MO's (reference number 18). An OMA-DM MO is 
identified by a URI. whereas a SIM file is identified by a hexadecimal code (and an 
optional human readable file name). The conversion map also provides a lookup 
for protocol conversion. Device management commands included in the OMA-DM 
protocol (reference number 20) corresponds to an RFM protocol command 
(reference number 21) with the equivalent functional meaning. 

Actually the protocol conversion Is more complex than what is illustrated in figure 
4. RFM protocol commands carried over-the-air are often SIM card type (vendor) 
proprietary. Therefore the APC conversion map holds infomiation about the 
correct RFM protocol equivalent for a wide variety of SIM card types. A lookup In 
the APC conversion map requires that the SIM card type as an input parameter. 
The mapping of protocol command equivalents is not done one-to-one, instead 
one-t(Mnany. This fact cleariy illustrates the enormous benefit of the APC system 
in a mobile device management system. 



